Boletines de Vulnerabilidades

Cisco BroadWorks CommPilot Application Software Vulnerabilities


Información sobre el sistema

   
Software afectado Cisco

Descripción

Multiple vulnerabilities in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device or obtain confidential information from the Cisco BroadWorks server and other devices on the network. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds

More info:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-ssrf-BJeQfpp?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20BroadWorks%20CommPilot%20Application%20Software%20Vulnerabilities&vs_k=1

Identificadores estándar

Propiedad Valor
CVE CVE-2022-20951 and CVE-2022-20958.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2023-01-25

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT